Privacy Policy

1. Company Information & Scope

The Cholonaa mobile application and services are owned and operated by CHOLONAA INDIA PRIVATE LIMITED ("we", "us", "our", or "Company"), incorporated under the laws of the Republic of India.

This policy applies to all users of our passenger mobile app, driver partner application, and official website (https://cholonaa.in).

2. Information We Collect

We collect information to provide reliable, safe, and lightning-fast ride-hailing services across India:

A. Information You Provide to Us

• Profile Information: Full name, verified mobile phone number, email address (optional), and profile picture.
• Emergency Contacts: Trusted contact names and phone numbers saved by you for safety SOS sharing.
• Customer Support Logs: Inquiries, chat messages, and call recordings conducted with our support desk.

B. Information Collected Automatically

• Device Information: Device model, operating system version, unique device identifiers, IP address, and mobile network operator.
• Trip Information: Pickup place, destination, exact route traversed, travel duration, fare paid, payment method, and driver feedback rating.

3. Location Data & Prominent Disclosure Google Play Requirement

To provide accurate ride-booking and navigation, Cholonaa accesses your precise GPS location:

• Foreground Location: When the app is open on your screen, we access your real-time location to display available nearby drivers on the map, set accurate pickup coordinates, and show live trip progress.
• Background Location (During Active Ride): While a ride is in progress, location tracking continues even if you switch apps or lock your screen. This ensures continuous safety tracking, route calculation, and real-time live trip sharing with emergency contacts. Location access ceases immediately when the ride ends.
• No Location Sale: Cholonaa never sells your personal location history to third-party advertising data brokers.

4. How We Use Your Information

We use your personal data strictly for legitimate operational purposes:

• Connecting riders with the nearest available driver partners in real-time.
• Calculating transparent fares based on approved distance-time slabs.
• Processing secure payments via RBI-authorized payment gateways.
• Enabling rider-driver in-app communication and masking private phone numbers where supported.
• Triggering 1-tap SOS alerts with live location coordinates to emergency contacts.
• Complying with statutory tax, transport, and police directives under Indian law.

5. Data Sharing & Third-Party Services

We share limited information only when strictly necessary:

• With Driver Partners: When you book a ride, your pickup location, first name, and destination are shared with the assigned driver. Your full personal account history is never revealed.
• Payment Processors: We partner with certified payment aggregators (including VisionsPayment and PayPur) to process UPI, NetBanking, and card transactions securely.
• Map & Navigation Providers: Google Maps Platform APIs are utilized for route rendering, distance calculations, and geocoding.
• Law Enforcement: We may disclose data when legally mandated by Indian courts, police agencies, or cyber crime authorities.

6. Data Security & Storage

We implement industry-grade technical safeguards including TLS 1.3 encryption in transit, strict database access controls, JWT authenticated sessions, and isolated server environments located in secure cloud data centers.

7. Your Rights & Permanent Account Deletion

You have full autonomy over your personal data under Indian Information Technology rules:

• Access & Edit: You can view and update your profile details inside the app settings at any time.
• Permissions: You can grant or revoke location, camera, or notification permissions through your Android device settings.
• Account & Data Deletion: You can permanently delete your Cholonaa account and all associated personal data:
  1. Open the Cholonaa app → Settings → Delete Account, OR
  2. Email cholonaarider@gmail.com with the subject "Delete My Account".
  Your personal information is permanently deleted from our active servers within 30 days, retaining only statutory accounting logs as required by Indian taxation laws.

8. Children's Privacy

Our services are not targeted at or intended for unsupervised children under 18 years of age. We do not knowingly collect personal identifiable information from minors.

9. Policy Updates

We may update this Privacy Policy from time to time. Any material changes will be announced on this website and in the app with an updated "Last Updated" timestamp.

10. Contact Us & Grievance Redressal

If you have any questions or data privacy grievances, please contact our Data Protection and Grievance Team: